QUESTION 23Your company has a Microsoft 365 subscription.You need to identify which users performed the following privileged administration tasks:– Deleted a folder from the second-stage Recycle Bin of Microsoft SharePoint – Opened a mailbox of which the user was not the owner – Reset a user passwordWhat should you use?

QUESTION 25You have a Microsoft 365 subscriptionAll users are assigned a Microsoft 365 E3 License.You enable auditing for your organization.What is the maximum amount of time data will be retained in the Microsoft 365 audit log?

QUESTION 26You have a Microsoft 365 subscription.You configure a data loss prevention (DIP) policy.You discover that users are incorrectly marking content as false positive and bypassing the OLP policy.You need to prevent the users from bypassing the DLP policy.What should you configure?

QUESTION 27You have a Microsoft 365 subscription.All users have their email stored in Microsoft Exchange Online. In the mailbox of a user named User 1. You need to preserve a copy of all the email messages that contain the word Project X.WDM should you do?

QUESTION 28Use actions to protect content when the conditions are met.

In Microsoft 365, you configure a data loss prevention (DLP) policy named Policy1. Policy1 detects the sharing of United States (US) bank account numbers in email messages and attachments. Policy1 is configured as shown in the exhibit. (Click the Exhibit tab.) You need to ensure that internal users can email documents that contain US bank account numbers to external users who have an email suffix of contoso.com.What should you configure?

QUESTION 29You have a Microsoft 365 subscription.From the Security & Compliance admin center, you create a content search of all the mailboxes that contain the word Project X.You need to export the results of the content search. What do you need to download the report?

QUESTION 30You have a Microsoft 36S subscription.Your company purchases a new financial application named App1. From Cloud Discovery in Microsoft Cloud App Security, you view the Discovered apps page and discover that many applications have a low score because they are missing information about domain registration and consumer popularity.You need to prevent the missing information from affecting the score. What should you configure from the Cloud Discover settings?

QUESTION 31A user receives the following message when attempting to sign in to https://myapps.microsoft.com:“Your sign-in was blocked. We’ve detected something unusual about this sign-in. For example, you might be signing in from a new location device, or app. Before you can continue, we need to verity your identity. Please contact your admin.”Which configuration prevents the users from signing in?

QUESTION 32Your company has a Microsoft 365 subscription.You need to identify which users performed the following privileged administration tasks:– Deleted a folder from the second-stage Recycle Bin of Microsoft SharePoint – Opened a mailbox of which the user was not the owner – Reset a user passwordWhat should you use?

QUESTION 33Hotspot QuestionYou have a Microsoft 365 subscription.You are configuring permissions for Security & Compliant. You need to ensure that the users can perform the tasks shown following table.

The solution must use the principle of least privilege. To which role should you assign each user? To answer, select the .impropriate options in the answer area.NOTE: Each correct selection is worth one point